isbell[.]vercel[.]app

Analysis of isbell.vercel.app shows a domain that was created on February 21, 2026 and is currently taken offline. The site presents a single page with the title "Deployment Unavailable" and returns HTTP status code 451, indicating that the resource is unavailable for legal reasons. The host resolves to IP address 64.29.17.131, which belongs to Amazon.com, Inc. (AS16509) and is located in the United States. The SSL certificate is issued by Google Trust Services under the WR1 intermediate, confirming that TLS termination is performed by the Vercel platform.

Header inspection reveals the presence of HTTP Strict Transport Security (HSTS), a standard security header. Infrastructure fingerprints identify Vercel as the underlying hosting service. The domain is registered through Tucows Domains Inc., a well‑known registrar, and appears on a single public blocklist maintained by PhishDestroy. VirusTotal scans have reported 15 detections out of 93 security vendors, reinforcing the suspicion of malicious activity.

No additional intelligence, such as Safe Browsing or Open Threat Exchange entries, is available in the provided data. The combination of recent creation, a generic deployment page, a high‑confidence TLS certificate from a reputable provider, and multiple vendor detections points to a generic phishing operation that was likely deployed and subsequently taken down. Defenders should continue to block the domain at network perimeter devices, monitor outbound connections to the associated IP range, and incorporate the domain hash into threat intelligence feeds. Because the site is offline, active investigation of its payload is limited; however, the existing indicators should be used to enrich detection rules and to alert on any future re‑registration attempts.